Security audit #469

	name: Security audit

	on:
	pull_request:
	schedule:
	# Runs at 00:00 UTC everyday
	- cron: "0 0 * * *"
	push:
	paths:
	- "**/Cargo.toml"
	- "**/Cargo.lock"
	- "crates/**/Cargo.toml"
	- "crates/**/Cargo.lock"
	merge_group:
	types: [checks_requested]

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	jobs:
	audit:
	if: ${{ github.repository_owner == 'rustic-rs' }}
	name: Run cargo audit
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
	# Ensure that the latest version of Cargo is installed
	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@1482605bfc5719782e1267fd0c0cc350fe7646b8 # v1
	with:
	toolchain: stable
	- uses: Swatinem/rust-cache@a95ba195448af2da9b00fb742d14ffaaf3c21f43 # v2
	- uses: rustsec/audit-check@dd51754d4e59da7395a4cd9b593f0ff2d61a9b95 # v1.4.1
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	cargo-deny:
	if: ${{ github.repository_owner == 'rustic-rs' }}
	name: Run cargo-deny
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

	- uses: EmbarkStudios/cargo-deny-action@1e59595bed8fc55c969333d08d7817b36888f0c5 # v1
	with:
	command: check bans licenses sources

	result:
	if: ${{ github.repository_owner == 'rustic-rs' }}
	name: Result (Audit)
	runs-on: ubuntu-latest
	needs:
	- audit
	- cargo-deny
	steps:
	- name: Mark the job as successful
	run: exit 0
	if: success()
	- name: Mark the job as unsuccessful
	run: exit 1
	if: "!success()"

Provide feedback